We have a challenge hopefully a Mikrotik-based solution will help resolving. 
We need to connect multiple clients (A, B, C etc) with different broadband providers in Africa. These connections could be 3G or xDSL. Each CPE will receive a public dynamic IP address (statics are not available). The aim of the solution is to provide a public static IP addresses from our own range mapped to each location so we can monitor and remote into each end user equipment.
Dynamic DNS is not an option because part of the solution is to be able to provide access control to specific ports from specific management networks. L2TP and IPsec designs have been considered, buy binding IPs and piping the static IP out does not seem possible.
Can this be achieved with EoIP tunnel? In an ideal world, we would like to set up a Mikrotik box with a single standard config which is dispatched to site and depending on the units MAC, it will be assigned a specific public IP at our end
Maybe the simple diagram attached can explain a bit better. We control the “magical box”, IP pool and firewall end.
Thanks! 